Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa
File:                     ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa (raw, json)
Hash identifier:          LJtLMuiOAMEvbO5Is5HAEH+ZTQ5ksIzgT6EDvlrsE4M=
Subject key identifier:   87:FA:48:37:E2:6D:F1:D4:3F:83:7A:7C:81:93:0D:92:9B:4D:47:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD79C7D253B2822204000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     48422
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d7:9c:7d:25:3b:28:22:20:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=57e56a11-1df2-467a-bb75-b36002d8e9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:52:43:28:9c:5f:60:33:da:a1:2c:d1:cc:
                    33:d3:bd:ec:71:cc:fb:85:85:61:24:e2:60:7c:66:
                    33:8e:9a:2b:a1:83:08:7d:86:c4:5d:b2:cc:38:39:
                    d1:37:bd:f4:80:e0:3c:39:44:66:53:cb:a1:8c:e4:
                    ef:c1:02:af:20:f9:e5:a5:bd:66:97:07:59:11:5f:
                    e3:ec:06:09:43:10:bb:cc:a0:a4:77:cf:c1:2b:fc:
                    c5:73:b8:45:b6:97:b5:68:29:27:43:c8:98:f7:d1:
                    a8:c7:ea:87:96:7e:7a:0f:b4:dc:d5:57:39:92:d5:
                    bd:1c:b2:13:d0:02:ac:4c:5d:21:4f:0f:c2:bb:1c:
                    b8:58:59:38:1e:eb:ef:06:f0:32:75:0f:75:4e:16:
                    0e:45:0c:a5:0d:ec:0c:a5:03:5c:27:df:41:14:be:
                    a0:08:b9:e3:92:34:7e:df:4e:92:8a:7b:fa:61:c3:
                    fb:f2:d2:68:2f:3f:4d:40:e4:9c:f4:26:83:9f:59:
                    fd:1e:dc:d2:62:ad:a9:73:20:c0:cd:8e:01:d3:38:
                    76:fd:70:66:cd:ff:00:eb:da:77:2d:b1:99:88:8c:
                    7c:25:1d:3a:d4:70:6e:2f:2d:20:95:bf:bf:e4:f7:
                    89:55:ee:57:61:f7:ba:9a:1d:22:a7:0f:4c:e8:90:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:48:37:E2:6D:F1:D4:3F:83:7A:7C:81:93:0D:92:9B:4D:47:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:52:6d:e7:de:fc:75:48:b2:82:51:2d:7f:b1:63:2f:a1:78:
         d2:d3:bf:aa:c0:83:8b:4f:92:e3:ee:ac:29:ac:75:1e:52:bc:
         02:76:28:6b:6d:2e:89:99:6e:51:36:94:39:5f:a4:9c:ba:09:
         fd:ba:98:a4:29:d8:bc:c0:11:a7:a7:14:1f:08:47:21:15:c0:
         f4:7d:f0:2e:9f:14:24:5e:58:8f:9d:5b:9b:93:3f:7f:7b:1f:
         d3:8c:9e:27:0d:be:2b:7d:1b:e7:d0:10:8d:aa:ac:3c:76:a2:
         9b:43:01:88:38:b9:c8:1b:34:04:a6:26:f2:18:3f:ee:e1:18:
         8b:00:ed:13:1b:8a:86:dc:69:1a:48:36:93:ee:5b:bf:ef:6f:
         5b:37:09:de:4d:b2:c1:3f:b0:a3:4d:26:62:b6:2c:29:0b:e2:
         04:37:f8:24:47:a5:4c:bd:e1:bc:1c:35:2c:ac:59:3e:3b:93:
         42:54:ba:17:bc:86:7e:ae:74:74:a6:d3:a5:af:0c:a7:d2:3a:
         6e:32:3f:b0:dc:fb:23:12:6b:b8:08:30:2e:ab:13:d8:8f:7a:
         be:97:6b:be:70:9a:3c:6a:7a:db:26:20:61:0c:9a:3d:da:b8:
         60:8b:bf:ac:93:0b:99:f5:4c:e5:ad:1d:a9:4d:25:db:c1:8e:
         95:9f:68:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G9ecfSU7KCIgQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NTdlNTZhMTEtMWRmMi00NjdhLWJiNzUtYjM2MDAyZDhlOWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgBSQyicX2Az2qEs0cwz073sccz7hYVhJOJg
fGYzjporoYMIfYbEXbLMODnRN730gOA8OURmU8uhjOTvwQKvIPnlpb1mlwdZEV/j
7AYJQxC7zKCkd8/BK/zFc7hFtpe1aCknQ8iY99Gox+qHln56D7Tc1Vc5ktW9HLIT
0AKsTF0hTw/Cuxy4WFk4HuvvBvAydQ91ThYORQylDewMpQNcJ99BFL6gCLnjkjR+
306Sinv6YcP78tJoLz9NQOSc9CaDn1n9HtzSYq2pcyDAzY4B0zh2/XBmzf8A69p3
LbGZiIx8JR061HBuLy0glb+/5PeJVe5XYfe6mh0ipw9M6JCZuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIf6SDfibfHUP4N6fIGTDZKbTUfLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWU4Y2ZkNGYtMWYzMS0z
ZWQzLWI2YjQtNWIxNjFkMjUxNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhSbefe/HVIsoJRLX+xYy+heNLTv6rAg4tPkuPurCmsdR5SvAJ2
KGttLomZblE2lDlfpJy6Cf26mKQp2LzAEaenFB8IRyEVwPR98C6fFCReWI+dW5uT
P397H9OMnicNvit9G+fQEI2qrDx2optDAYg4ucgbNASmJvIYP+7hGIsA7RMbiobc
aRpINpPuW7/vb1s3Cd5NssE/sKNNJmK2LCkL4gQ3+CRHpUy94bwcNSysWT47k0JU
uhe8hn6udHSm06WvDKfSOm4yP7Dc+yMSa7gIMC6rE9iPer6Xa75wmjxqetsmIGEM
mj3auGCLv6yTC5n1TOWtHalNJdvBjpWfaL0=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:27 2025 by rpki-client